MiniUPnP CVE-2013-0230 Stack-Based Buffer Overflow Vulnerabilities

Bugtraq ID:	57608
Class:	Boundary Condition Error
CVE:	CVE-2013-0230
Remote:	Yes
Local:	No
Published:	Jan 28 2013 12:00AM
Updated:	May 12 2015 07:46PM
Credit:	HD Moore of Rapid7
Vulnerable:	MiniUPnP Project MiniUPnP 1.0 D-Link DIR-836L 1.03 D-Link DIR-826L 1.04b05 D-Link DIR-636L 1.03 D-Link DIR-626L 1.03
Not Vulnerable:	MiniUPnP Project MiniUPnP 1.4 MiniUPnP Project MiniUPnP 1.3 MiniUPnP Project MiniUPnP 1.1 D-Link DIR-836L 1.04b09 D-Link DIR-826L 1.05b06 D-Link DIR-636L 1.05b07 D-Link DIR-626L 1.04b04

MiniUPnP CVE-2013-0230 Stack-Based Buffer Overflow Vulnerabilities

MiniUPnP is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit these issues to execute arbitrary code in the context of the device that uses the affected library. Failed exploit attempts will likely crash the application.

MiniUPnP 1.0 is vulnerable; other versions may also be affected.

MiniUPnP CVE-2013-0230 Stack-Based Buffer Overflow Vulnerabilities

The following example request is available:

M-SEARCH * HTTP/1.1
Host:239.255.255.250:1900
ST:uuid:schemas:device:AAAA[â?¦]AAAA:anything
Man:"ssdp:discover"
MX:3

The following exploits are available:

• /data/vulnerabilities/exploits/57608.rb
• /data/vulnerabilities/exploits/57608.py

MiniUPnP CVE-2013-0230 Stack-Based Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

MiniUPnP CVE-2013-0230 Stack-Based Buffer Overflow Vulnerabilities

References: